Known vulnerabilities in ovirt-engine-dwh (Red Hat package)

Vendor: Red Hat Inc.

Software: ovirt-engine-dwh (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:ovirt-engine-dwh_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 20

Public exploits: 2

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (20)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU69393 - Information Exposure Through Log Files CVE-2022-2805	CWE-532	Low	No	No	4.5.7-1.el8ev	16.11.2022	SB2022111651 SB2022111658
#VU67131 - Information Exposure Through Log Files CVE-2022-2806	CWE-532	Low	No	No	4.5.4-1.el8ev	08.09.2022	SB2022090832 SB2022090833 SB2022092637 and 1 more
#VU65835 - Incorrect Regular Expression CVE-2022-31129	CWE-185	Medium	No	No	4.5.4-1.el8ev	27.07.2022	SB2022072729 SB2022072901 SB2022081048 and 102 more
#VU65358 - Exposure of sensitive information to an unauthorized actor CVE-2022-31051	CWE-200	Medium	No	No	4.5.3-1.el8ev	15.07.2022	SB2022071701
#VU63709 - Incorrect Regular Expression CVE-2021-33623	CWE-185	Medium	No	No	4.5.3-1.el8ev	26.05.2022	SB2022071701 SB2023040536 SB2023051544 and 2 more
#VU61760 - Incorrect Regular Expression CVE-2022-22950	CWE-185	Medium	No	No	4.5.3-1.el8ev	31.03.2022	SB2022033110 SB2022060308 SB2022060324 and 25 more
#VU61720 - Improper input validation CVE-2021-22096	CWE-20	Medium	No	No	4.5.4-1.el8ev	29.03.2022	SB2021102810 SB2022032929 SB2022032930 and 15 more
#VU61669 - Exposure of sensitive information to an unauthorized actor CVE-2022-0155	CWE-200	Low	No	No	4.5.7-1.el8ev	28.03.2022	SB2022032840 SB2022032843 SB2022071505 and 32 more
#VU57967 - Improper input validation CVE-2021-3807	CWE-20	Medium	No	No	4.5.3-1.el8ev	05.11.2021	SB2021110513 SB2021112603 SB2022042257 and 51 more
#VU55315 - Incorrect Regular Expression CVE-2021-23343	CWE-185	Medium	No	No	4.4.7.3-1.el8ev	26.07.2021	SB2021072624 SB2021072625 SB2022060618 and 24 more
#VU54854 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-35515	CWE-835	Medium	No	No	4.5.3-1.el8ev	14.07.2021	SB2021071408 SB2021080809 SB2021100411 and 23 more
#VU54853 - Resource exhaustion CVE-2021-36090	CWE-400	Medium	No	No	4.5.3-1.el8ev	14.07.2021	SB2021071408 SB2021080809 SB2021100411 and 70 more
#VU54852 - Resource exhaustion CVE-2021-35517	CWE-400	Medium	No	No	4.5.3-1.el8ev	14.07.2021	SB2021071408 SB2021080809 SB2021100411 and 33 more
#VU54851 - Resource exhaustion CVE-2021-35516	CWE-400	Medium	No	No	4.5.3-1.el8ev	14.07.2021	SB2021071408 SB2021080809 SB2021100411 and 21 more
#VU52985 - Incorrect Regular Expression CVE-2020-28469	CWE-185	Medium	No	No	4.4.7.3-1.el8ev, 4.4.9.1-1.el8ev	10.05.2021	SB2021051002 SB2021051004 SB2021072625 and 26 more
#VU51945 - Improper Control of Generation of Code ('Code Injection') CVE-2021-23358	CWE-94	High	No	No	4.4.7.3-1.el8ev, 4.5.4-1.el8ev	06.04.2021	SB2021040623 SB2021040624 SB2021050609 and 20 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-25649	CWE-611	Medium	No	No	4.4.4.2-1.el8ev	03.12.2020	SB2020121510 SB2021020321 SB2021042112 and 68 more
#VU47053 - Improper input validation CVE-2020-7733	CWE-20	Medium	No	No	4.4.7.3-1.el8ev, 4.4.9.1-1.el8ev	16.09.2020	SB2020092407 SB2021072133 SB2021072625 and 1 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11023	CWE-79	Low	Available	Exploited	4.5.4-1.el8ev	05.05.2020	SB2020042126 SB2020052033 SB2020052103 and 180 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022	CWE-79	Low	Available	No	4.5.4-1.el8ev	21.04.2020	SB2020042126 SB2020052033 SB2020052103 and 181 more

Known vulnerabilities in ovirt-engine-dwh (Red Hat package)

Breakdown by Severity Chart

Vulnerabilities (20)

Please verify you're human